What is Logdissect

A cloud-native SIEM platform that provides security analytics, intuitive workflow, and simplified incident response to help security teams defend against cyber threats.

Logdissect: A CLI Utility for Log Analysis

Logdissect is a command-line interface (CLI) utility and a Python library designed for analyzing log files and other types of data.

Data Parsing, Merging, Filtering, and Exporting

This tool can parse, merge, filter, and export data to log files or in JSON format. Installing: To install the latest release, please refer to the instructions available on the releases page. For installing the development source, consult the guidelines provided in CONTRIBUTING.md. Usage Options: usage: logdissect.py [-h] [--dhost DHOST] [--grep PATTERN] [--last LAST] [--process PROCESS] [--protocol PROTOCOL] [--range RANGE] [--utc] [--rdhost DHOST] [--rgrep PATTERN] [--rprocess PROCESS] [--rprotocol PROTOCOL] [--rshost SHOST] [--rsource SOURCE] [--shost SHOST] [--source SOURCE] [--linejson LINEJSON] [--outlog OUTLOG] [--label LABEL] [--sojson SOJSON] [--pretty] [--version] [--verbose] [-s] [--list-parsers] [-p PARSER] [-z] [-t TZONE] [file [file ...]] Requirements: 1. Retain all technical terms and concepts exactly as they are. 2. Use clearer and more accessible language. 3. Maintain the same content structure and format. 4. Do not add or remove any information. 5. Keep a similar length; if content is very short, add a little more.

For library documentation, please refer to the...

For library documentation, please refer to the module documentation.

Logdissect Reviews

No reviews yet.

Similar Tools

Free
SIEM

Sysdig

Sysdig empowers organizations to achieve robust cloud and container security and reliability. By offering a unified platform, Sysdig enables security teams to proactively identify and remediate software vulnerabilities, detect and respond to sophisticated threats, and maintain essential cloud configurations, permissions, and compliance. Gain unparalleled visibility from code to production, eliminating blind spots and guesswork for a truly secure cloud environment.

Unified Cloud and Container Security PlatformVulnerability Management and PrioritizationReal-time Threat Detection and Response
Free
SIEM

Graylog

Graylog is a leading centralized log management solution designed for modern log analytics, empowering teams to efficiently consolidate, enrich, correlate, query, and visualize all log data in a single, cost-effective platform. It provides IT professionals with scalable, real-time insights into machine data, enabling faster resolution of security, compliance, operational, and DevOps challenges. Purpose-built to remove complexity, Graylog facilitates streamlined data exploration, threat hunting, and compliance audits, ensuring teams can quickly extract meaning and act decisively.

Centralized Log ManagementReal-time Data AnalysisRich Data Enrichment and Correlation
Free
SIEM

Elastic

Elastic is the premier provider of software enabling real-time usability of structured and unstructured data for search, logging, security, and analytics. At its core, Elasticsearch, a distributed, RESTful search and analytics engine, powers the Elastic Stack, centralizing data for both predictable insights and unexpected discoveries. Elastic Security offers a comprehensive, free, and open solution for SIEM, endpoint security, threat hunting, and cloud monitoring, empowering teams to proactively defend against threats and secure sensitive information.

Real-time search and analytics engineUnified platform for log management and observabilityComprehensive security information and event management (SIEM)
Free
SIEM

zeek2es.py

SysmonSearch makes event log analysis more effective by aggregating Microsoft Sysmon logs and providing detailed analysis through Elasticsearch and Kibana.

Free
SIEM

Zentral

Graylog offers advanced log management and SIEM capabilities to enhance security and compliance across various industries.

Free
SIEM

Zircolite

Open source security data lake for AWS with real-time log normalization and Detection-as-Code capabilities.

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by